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Abstract. The subject of this work is quantum predicative program- 
ming — the study of developing of programs intended for execution on 
a quantum computer. We look at programming in the context of formal 
methods of program development, or programming methodology. Our 
work is based on probabilistic predicative programming, a recent gen- 
eralisation of the well-established predicative programming. It supports 
the style of program development in which each programming step is 
proven correct as it is made. We inherit the advantages of the theory, 
such as its generality, simple treatment of recursive programs, time and 
space complexity, and communication. Our theory of quantum program- 
ming provides tools to write both classical and quantum specifications, 
develop quantum programs that implement these specifications, and rea- 
son about their comparative time and space complexity all in the same 
framework. 



1 Introduction 

Modern physics is dominated by concepts of quantum mechanics. Today, over 
seventy years after its recognition by the scientific community, quantum me- 
chanics provides the most accurate known description of nature's behaviour. 
Surprisingly, the idea of using the quantum mechanical nature of the world to 
perform computational tasks is very new, less than thirty years old. Quantum 
computation and quantum information is the study of information processing 
and communication accomplished with quantum mechanical systems. In recent 
years the field has grown immensely. Scientists from various fields of computer 
science have discovered that thinking physically about computation yields new 
and exciting results in computation and communication. There has been ex- 
tensive research in the areas of quantum algorithms, quantum communication 
and information, quantum cryptography, quantum error-correction, adiabatic 
computation, measurement-based quantum computation, theoretical quantum 
optics, and the very new quantum game theory. Experimental quantum infor- 
mation and communication has also been a fruitful field. Experimental quantum 
optics, ion traps, solid state implementations and nuclear magnetic resonance 
all add to the experimental successes of quantum computation. 

The subject of this work is quantum programming — the study of developing 
programs intended for execution on a quantum computer. We assume a model 
of a quantum computer proposed by Knill |24j : a classical computer with access 
to a quantum device that is capable of storing quantum bits, performing certain 
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operations and measurements on these bits, and reporting the results of the 
measurements . 

We look at programming in the context of formal methods of program de- 
velopment, or programming methodology. This is the field of computer science 
concerned with applications of mathematics and logic to software engineering 
tasks. In particular, the formal methods provide tools to formally express soft- 
ware specifications, prove correctness of implementations, and reason about vari- 
ous properties of specifications (e.g. implementability) and implementations (e.g. 
time and space complexity). Today formal methods are successfully employed in 
all stages of software development, such as requirements elicitation and analysis, 
software design, and software implementation. 

In this work the theory of quantum programming is based on probabilistic 
predicative programming, a recent generalisation of the well-established predica- 
tive programming |19I20| , which we deem to be the simplest and the most elegant 
programming theory known today. It supports the style of program development 
in which each programming step is proven correct as it is made. We inherit the 
advantages of the theory, such as its generality, simple treatment of recursive 
programs, and time and space complexity. Our theory of quantum program- 
ming provides tools to write both classical and quantum specifications, develop 
quantum programs that implement these specifications, and reason about their 
comparative time and space complexity all in the same framework. 

The rest of this work is organised as follows. Section ETT1 is the introduction 
to quantum computation. It assumes that the reader has some basic knowledge 
of linear algebra and no knowledge of quantum computing. Section 12.21 con- 
tains the introduction to probabilistic predicative programming. The reader is 
assumed to have some background in logic, but no background in programming 
theory is necessary. The contribution of this work is section [3] which defines 
the quantum system, introduces programming with the quantum system, and 
several well-known problems, their classical and quantum solutions, and their 
formal comparative time complexity analyses. Section 0] states conclusions and 
outlines directions for future research. 

1.1 Related work 

Traditionally, quantum computation is presented in terms of quantum circuits. 
Recently, there has been an attempt to depart from this convention for the same 
reason that classical computation is generally not presented in terms of classical 
circuits. As we develop more complex quantum algorithms, we will need ways to 
express higher-level concepts with control structures in a readable fashion. 

In 2000 Omcr 28 introduced the first quantum programming language QCL. 
Following his work, Bcttclli et. al. developed a quantum programming language 
with syntax based on CH — h These two works did not involve any verification 
techniques. 

Sanders and Zuliani in |29j introduced a quantum language qGCL, which is an 
extension of pGCL |26| . which in turn generalises Dijkstra's guarded-command 
language to include probabilism. Zuliani later extends this attempt at formal 
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program development and verification in , which discusses treatment of non- 
determinism in quantum programs, and in |H8j . where the attempt is made to 
build on Aharonov's work to reason about mixed states computations. Zuliani 
also provides tools to approach the task of compiling quantum programs in |37) . 

A large amount of work in the area was performed in the past two years. 
In g|, [25], and |22I process algebraic approaches were explored. Tools devel- 
oped in the field of category theory were successfully employed by P, [3J, 
[TT] , [30| , and others to reason about quantum computation. In [7j and [S] a func- 
tional language with semantics in a form of a term rewrite system is introduced 
and a notion of linearity and how it pertains to quantum systems are examined. 
A functional language QML with design guided by its categorical semantics is 
defined in [Sj. Following on this work, |2] provides a sound and complete equa- 
tional theory for QML. Weakest preconditions appropriate for quantum compu- 
tation are introduced in |15| . This work is interesting, in part, because it diverts 
from the standard approach of reducing quantum computation to probabilistic 
one. It also provides semantics for the language of |80| . Other interesting work 
by the same authors include reasoning about knowledge in quantum systems 
and developing a formal model for distributed measurement-based quan- 
tum computation f|12|V A similar work is introduced in |17| . where a language 
CQP for modelling communication in quantum systems is defined. The latter 
approaches have an advantage over process algebraic approaches mentioned ear- 
lier in that they explicitly allow a quantum state to be transmitted between 
processes. Building of the work of [32| defines a higher order quantum pro- 
gramming language based on a linear typed lambda calculus, which is similar to 
the work of [3J] . 

1.2 Our contribution 

Our approach to quantum programming amenable to formal analysis is very 
different from almost all of those described above. Work of [21], [SB], [HE] is the 
only one which is similar to our work. The contribution of this paper is twofold. 
Firstly, by building our theory on that in |2(Jj . we inherit the advantages it of- 
fers. The definitions of specification and program are simpler: a specification is 
a boolean (or probabilistic) expression and a program is a specification. The 
treatment of recursion is simple: there is no need for additional semantics of 
loops. The treatment of termination simply follows from the introduction of a 
time variable; if the final value of the time variable is oo, then the program is 
a non-terminating one. Correctness and time and space complexity are proved 
in the same fashion; moreover, after proving them separately, we naturally ob- 
tain the conjunction. Secondly, the way Probabilistic Predicative Programming 
is extended to Quantum Predicative Programming is simple and intuitive. The 
use of Dirac-like notation makes it easy to write down specifications and develop 
algorithms. The treatment of computation with mixed states does not require 
any additional mechanisms. Quantum Predicative Programming fully preserves 
Predicative Programming's treatment of parallel programs and communication, 
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which provides for a natural extension to reason about quantum communica- 
tion protocols, such as BB84 (0), distributed quantum algorithms, such as dis- 
tributed Shor's algorithm as well as their time, space, and entanglement 
complexity. 

2 Preliminaries 

2.1 Quantum Computation 

In this section we introduce the basic concepts of quantum mechanics, as they 
pertain to the quantum systems that we will consider for quantum computation. 
The discussion of the underlying physical processes, spin- ^-particles, etc. is not of 
our interest. We are concerned with the model for quantum computation only. A 
reader not familiar with quantum computing can consult |27| for a comprehensive 
introduction to the field. 

The Dirac notation, invented by Paul Dirac, is often used in quantum me- 
chanics. In this notation a vector v (a column vector by convention) is written 
inside a ket: \v). The dual vector of \v) is (v\, written inside a bra. The inner prod- 
ucts are bra-kets (v\w). For n-dimensional vectors \u) and \v) and m-dimensional 
vector \w), the value of the inner product (u\v) is a scalar and the outer product 
operator |u)(iu| corresponds to an m by n matrix. The Dirac notation clearly 
distinguishes vectors from operators and scalars, and makes it possible to write 
operators directly as combinations of bras and kets. 

In quantum mechanics, the vector spaces of interest are the Hilbert spaces of 
dimension 2™ for some n € N. A convenient orthonormal basis is what is called 
a computational basis, in which we label 2™ basis vectors using binary strings of 
length n as follows: if s is an n-bit string which corresponds to the number x s , 
then \s) is a 2™-bit (column) vector with 1 in position x s and everywhere else. 
The tensor product \i) ® \j) can be written simply as \ij). An arbitrary vector 
in a Hilbert space can be written as a weighted sum of the computational basis 
vectors. 

Postulate 1 (state space) Associated to any isolated physical system is a 
Hilbert space, known as the state space of the system. The system is com- 
pletely described by its state vector, which is a unit vector in the system's 
state space. 

Postulate 2 (evolution) The evolution of a closed quantum system is de- 
scribed by a unitary transformation. 

Postulate 3 (measurement) Quantum measurements are described by a col- 
lection {M rn } of measurement operators, which act on the state space of the 
system being measured. The index m refers to the possible measurement 
outcomes. If the state of the system immediately prior to the measurement 
is described by a vector \tp), then the probability of obtaining result m is 
(ijj\Ml l M m \'ip) , in which case the state of the system immediately after the 
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measurement is described by the vector , m J v> The measurement 

V (i>\MLM m \ij>) 

operators satisfy the completeness equation J2 m ■ M^M m = I. 

An important special class of measurements is projective measurements, which 
are equivalent to general measurements provided that we also have the ability 
to perform unitary transformations. 

A projective measurement is described by an observable M, which is a Hcrmi- 
tian operator on the state space of the system being measured. This observable 
has a spectral decomposition M — ■ \ m x P m , where P m is the projector 
onto the eigenspace of M with eigenvalue A m , which corresponds to the outcome 
of the measurement. The probability of measuring m is (ip\P m \ip), in which case 
immediately after the measurement the system is found in the state p ™\^) 

Given an orthonormal basis \v m ), < m < 2", measurement with respect to 
this basis is the corresponding projective measurement given by the observable 
M = Y]m- X m x P m , where the projectors are P m = \v m )(v m \. 

Measurement with respect to the computational basis is the simplest and the 
most commonly used class of measurements. In terms of the basis |m), < m < 
2™, the projectors are P m = \m)(m\ and {tp\P m \^p) = \^p m \ 2 ■ The state of the 
system immediately after measuring m is |m). 

In the case of a single qubit, for example, measurement of the state a x 
|0) + j3 x |1) results in the outcome with probability \a\ 2 and outcome 1 with 
probability \/3\ 2 . The state of the system immediately after the measurement is 
|0) or |1), respectively. 

Suppose the result of the measurement is ignored and we continue the com- 
putation. In this case the system is said to be in a mixed state. A mixed state is 
not the actual physical state of the system. Rather it describes our knowledge 
of the state the system is in. In the above example, the mixed state is expressed 
by the equation \ip) — \a\ 2 x {|0)} + |/3| 2 x {|1)}. The equation is meant to 
say that is |0) with probability \a\ 2 and it is |1) with probability |/3| 2 . An 
application of operation U to the mixed state results in another mixed state, 
U(\a\ 2 x {|0» + \(3\ 2 x {|1>}) = \a\ 2 x {t/|0>} + |/3| 2 x {U\l)}. 

Postulate 4 (composite systems) The state space of a composite physical 
system is the tensor product of the state spaces of the component systems. 
If we have systems numbered up to and excluding n, and each system i, 
< i < n, is prepared in the state \ipi), then the joint state of the composite 
system is |V>o) ® l^i) ® • • ■ ® \4>n-i)- 

While we can always describe a composite system given descriptions of the com- 
ponent systems, the reverse is not true. Indeed, given a state vector that de- 
scribes a composite system, it may not be possible to factor it to obtain the 
state vectors of the component systems. A well-known example is the state 
IV'} = |00)/\/2 + 1 11) /a/2- Such state is called an entangled state. 
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2.2 Probabilistic Predicative Programming 

This section introduces the programming theory of our choice, on which our work 
on quantum programming is based — probabilistic predicative programming. 
We briefly introduce parts of the theory necessary for understanding section[3]of 
this work. For a course in predicative programming the reader is referred to 
Introduction to probabilistic predicative programming can be found in |2()| . 

Predicative programming In predicative programing a specification is a 
boolean expression. The variables in a specification represent the quantities of 
interest, such as prestate (inputs), poststate (outputs), and computation time 
and space. We use primed variables to describe outputs and unprimed variables 
to describe inputs. For example, specification x' = x + 1 in one integer variable x 
states that the final value of x is its initial value plus I. A computation satisfies 
a specification if, given a prestate, it produces a poststate, such that the pair 
makes the specification true. A specification is implementable if for each input 
state there is at least one output state that satisfies the specification. 

We use standard logical notation for writing specifications: A (conjunction), V 
(disjunction), =>• (logical implication) , = (equality, boolean equivalence), ^ (non- 
equality, non-equivalence), and if then else. = and =>• are the same as = and 
=>, but with lower precedence. We use standard mathematical notation, such as 
+ — * / mod. We use lowercase letters for variables of interest and uppercase 
letters for specifications. 

In addition to the above, we use the following notations: a (prestate), a' 
(poststate), ok (a 1 — a), and x :— e (x' = e A y' = y A . . .). ok specifies that 
the values of all variables are unchanged. In the assignment x :— e, x is a state 
variable (unprimed) and e is an expression (in unprimed variables) in the domain 
of x. 

If R and S are specifications in variables x,y, . . . , R" is obtained from R 
by substituting all occurrences of primed variables x',y', . . . with double-primed 
variables x",y" , . . . , and S" is obtained from S by substituting all occurrences 
of unprimed variables x, y, . . . with double-primed variables x" , y" , . . . , then the 
sequential composition of R and S is defined by 



Various laws can be proven about sequential composition. One of the most 
important ones is the substitution law, which states that for any expression e of 
the prestate, state variable x, and specification P, 

x := e; P = (for x substitute e in P) 

Specification S is refined by specification P if and only if S is satisfied when- 
ever P is satisfied: 



R:S = 



Bx", y",... R" A S' 



in 



Vo-,a'-S^P 
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Specifications S and P are equal if and only if they are satisfied simultane- 
ously: 

Vct, a 1 ■ S = P 

Given a specification, we are allowed to implement an equivalent specification 
or a stronger one. 

Informally a bunch is a collection of objects. It is different from a set, which 
is a collection of objects in a package. Bunches are simpler than sets; they don't 
have a nesting structure. See |20| for an introduction to bunch theory. A bunch of 
one element is the element itself. We use upper-case to denote arbitrary bunches 
and lower-case to denote elements (an element is the same as a bunch of one 
element). A, B denotes the union of bunches A and B. A : B denotes bunch 
inclusion — bunch A is included in bunch B. We use notation x, ..y to mean 
from (including) x to (excluding) y. 

If x is a fresh (previously unused) name, D is a bunch, and b is an arbitrary 
expression, then Ax : D ■ b is a function of a variable (parameter) x with domain 
D and body b. If / is a function, then Af denotes the domain of f.Iix: Af, 
then fx (/ applied to x) is the corresponding element in the range. A function of 
n variables is a function of 1 variable, whose body is a function of n — 1 variables, 
for n > 0. A predicate is function whose body is a boolean expression. A relation 
is a function whose body is a predicate. A higher-order function is a function 
whose parameter is a function. 

A quantifier is a unary prefix operator that applies to functions. If p is a 
predicate, then Vp is the boolean result, obtained by first applying p to all the 
elements in its domain and then taking the conjunction of those results. Taking 
the disjunction of the results produces Bp. Similarly, if / is a numeric function, 
then ^2 f is the numeric result, obtained by first applying / to all the elements 
in its domain and then taking the sum of those results. 

For example, applying the quantifier to the function Xi : 0, ..2™ • \tpi\ 2 , for 
some function ip, yields: Ai : 0, ..2" • \ipi\ 2 , which for the sake of simplicity we 
abbreviate to i : 0, ..2™ • \ipi\ 2 . In addition, we allow a few other simplifications. 
For example, we can omit the domain of a variable if it is clear from the context. 
We can also group variables from several quantifications. For example, i : 
0, ..2" • J2 3 ■ 0, ..2" • 2~ m - n can be abbreviated to J2h3 : 0, ■• 2 " ' 2- rn ~ n . 

A program is an implemented specification. For simplicity we only take the 
following to be implemented: ok, assignment, if then else, sequential composi- 
tion, booleans, numbers, bunches, and functions. 

Given a specification S, we proceed as follows. If S is a program, there is no 
work to be done. If it is not, we build a program P, such that P refines S, i.e. 
S <= P. The refinement can proceed in steps: S , <S=...-^i?^=Q^P. 

One of the best features of Hchncr's theory, is its simple treatment of re- 
cursion. In S <= P it is possible for S to appear in P. No additional rules are 
required to prove the refinement. For example, it is trivial to prove that 

x > =>• x = <^= if x = then ok else (x := x — 1; x > x' = 0) 
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The specification says that if the initial value of x is non-negative, its final 
value must be 0. The solution is: if the value of x is zero, do nothing, otherwise 
decrement x and repeat. 

How long does the computation take? To account for time we add a time 
variable t. We use t to denote the time, at which the computation starts, and t' 
to denote the time, at which the computation ends. In case of non-termination, 
t' = oo. This is the only characteristic by which we distinguish terminating 
programs from non-terminating ones. See |21| for a discussion on treatment of 
termination. We choose to use a recursive time measure, in which we charge 1 
time unit for each time P is called. We replace each call to P to include the time 
increment as follows: 

P <== if x = then ok else (x := x — 1; t := t + 1; P) 

It is easy to see that t is incremented the same number of times that x is 
decremented, i.e. t' = t + x, if x > 0, and t' = oo, otherwise. Just as above, we 
can prove: 

x>0At' = t + xVx<0At' = oo 
<;= if x = then ok 

else (x := x- 1; t := t + 1; x > At' = i + a; V x < At' = oo) 

Probabilistic predicative programming Probabilistic predicative program- 
ming was introduced in |19j and was further developed in |20|. It is a gener- 
alisation of predicative programming that allows reasoning about probability 
distributions of values of variables of interest. Although in this work we apply 
this reasoning to boolean and integer variables only, the theory does not change 
if we want to work with real numbers: we replace summations with integrals. 

A probability is a real number between and 1, inclusive. A distribution is an 
expression whose value is a probability and whose sum over all values of variables 
is 1. For example, if n is a positive natural variable, then 2~" is a distribution, 
since for any n, 2~ n is a probability, and n ' 2~™ = 1. In two positive natural 
variables m and n, 2~ n ~ rn is also a distribution. If a distribution of several 
variables can be written as a product of distributions of the individual variables, 
then the variables are independent. For example, m and n in the previous example 
are independent. Given a distribution of several variables, we can sum out some 
of the variables to obtain a distribution of the rest of the variables. In our 
example, n ■ 2~"~ m = 2~ m , which is a distribution of m. 

To generalise boolean specifications to probabilistic specifications, we use 
1 and for boolean true and false, respectively. 1 If S is an implementable 
deterministic specification and p is a distribution of the initial state x, y, then 
the distribution of the final state is 




1 Readers familiar with T and _L notation can notice that we take the liberty to equate 



T = 1 and _L = 0. 
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If R and S are specifications in variables x, y, . . . , R" is obtained from R by 
substituting all occurrences of primed variables x',y',... with double-primed 
variables x",y", . . . , and S" is obtained from S by substituting all occurrences 
of unprimed variables x,y, . . . with double-primed variables x",y", . . . , then the 
sequential composition of R and S is defined by 



If p is a probability and R and S are distributions, then 

if p then R else S = pxR+(l-p)xS 

Various laws can be proven about sequential composition. One of the most 
important ones, the substitution law, introduced earlier, applies to probabilistic 
specifications as well. 

To implement a probabilistic specification we use a pseudo-random number 
generator. Since we cannot, even in theory, produce a real random number gen- 
erator by means of traditional computing, we assume that a pseudo-random 
number generator generates truly random numbers and we simply refer to it 
as random number generator. For a positive natural variable n, we say that 
rand n produces a random natural number uniformly distributed in 0, ..n. To 
reason about the values supplied by the random number generator consistently, 
we replace every occurrence of rand n with a fresh variable r whose value has 
probability (r : 0, ..n)/n. If rand occurs in a context such as r — rand n, we 
replace the equation by r : (0, ..n)/n. If rand occurs in the context of a loop, we 
parametrise the introduced variables by the execution time. 

Recall the earlier example. Let us change the program slightly by introducing 
probabilism: 

P <= if x = then ok else (x := x — rand 2; t := t + 1; P) 

In the new program at each iteration x is either decremented by 1 or it is un- 
changed, with equal probability. Our intuition tells us that the revised program 
should still work, except it should take longer. Let us prove it. We replace rand 
with r : time — ► (0,1) with rt having probability 1/2. Ignoring time we can 
prove: 

x > x = 

if x = then ok else (x := x — rand 2; x > ^> x' = 0) 

As for the execution time, we can prove that it takes at least x time units to 
complete: 

t' > t + x 

<== if x = then ok else (x := x — rand 2; t := t + 1; t' > t + x) 



R" x 5" 



How long should we expect to wait for the execution to complete? In other 
words, what is the distribution of t'7 Consider the following distribution of the 
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final states: 

(0 = x' = x = t' -t) + (0 = x' < x < t' -t) X | 1 1 ) x — I— . 

\ x — 1 / 2 l 1 



where 



v m J to! x (n — m)\ 
We can prove that: 



1 



x if a; = then ok 



else [ a; := x — rt; t := t + 1; 
(0 = x' = x = t' - t) + 

(0 = x' < x < t' - t) x 



t'-t-l\ 1 

, X 

x-l 



= (0 = x' = x = t' = t) + (0 = x' < x < t' - t) x ( 1 1 ) x -J— 

\ x — 1 / 2 £ 1 

Now, since for positive x, t 1 is distributed according to the negative binomial 
distribution with parameters x and \ , its mean value is 

"£t>-(t>-t)x((0 = x = t>-t) + (0<x<t'-t)x f*'"!^ 1 ) x^l) 
= 2xi + i 

Therefore, we should expect to wait 2 x x time units for the computation to 
complete. 



3 Quantum Predicative Programming 

This section is the contribution of the paper. Here we define the quantum sys- 
tem, introduce programming with the quantum system and several well-known 
problems, their classical and quantum solutions, and their formal comparative 
time complexity analyses. The proofs of refinements are omitted for the sake of 
brevity. The reader is referred to [32] for detailed proofs of some of the algo- 
rithms. 



3.1 The quantum system 

Let C be the set of all complex numbers with the absolute value operator | • | 
and the complex conjugate operator *. Then a state of an rt-qubit system is a 
function ip : 0, ..2" -> C, such that X> = 0, ..2™ • \ipx\ 2 = l 2 . 

2 We should point out that this kind of function operations is referred to as lifting 
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If ip and <p are two states of an n-qubit system, then their inner product, 
(ip\(p) ■ C, is denned by: 

A basis of an n-qubit system is a collection of 2™ quantum states 60. ..2", such 
that Mi, j : 0, ..2" • (6^) = (i = j). 

We adopt the following Dirac-like notation for the computational basis: if 
x : 0, ..2™, then x denotes the corresponding n-bit binary encoding of x and 
|x) : 0, ..2" — > C is the following quantum state: 

|x) = Xi : 0, ..2" -(i = x) 

If ^ is a state of an m-qubit system and is a state of an n-qubit system, 
then ip ® <p, the tensor product of ip and cp, is the following state of a composite 
m + n-qubit system: 

i/> ® = Ai : 0, ..2 m+n • V(i div 2 n ) x 0(i mod 2 n ) 

We write ®" to mean tensored with itself n times. 

An operation defined on a n-qubit quantum system is a higher-order function, 
whose domain and range are maps from 0, ..2™ to the complex numbers. An 
identity operation on a state of an n-qubit system is defined by 

I n = Xip : 0, ..2 n ^ C ■ ip 

For a linear operation A, the adjoint of A, written A\ is the (unique) operation, 
such that for any two states ip and <p, (ip\A<p) = (A'i/j\(j>). The unitary transfor- 
mations that describe the evolution of a n-qubit quantum system are operations 
U defined on the system, such that U^U = I n . In this setting, the tensor product 
of operators is defined in the usual way. If ip is a state of an m-qubit system, <j> 
is a state of an n-qubit system, and U and V are operations defined on m and 
n-qubit systems, respectively, then the tensor product of U and V is defined on 
an m + n qubit system by (U ® V)(ij) ® <j>) = (Uip) (8) (V</>). 

Just as with tensor products of states, we write U® n to mean operation U 
tensored with itself n times. 

Suppose we have a system of n qubits in state ip and we measure it. Suppose 
also that we have a variable r from the domain 0, ..2", which we use to record the 
result of the measurement, and variables x, y, . . ., which are not affected by the 
measurement. Then the measurement corresponds to a probabilistic specification 
that gives the probability distribution of ip 1 and r' (these depend on ip and on 
the type of measurement) and states that the variables x,y, . . . are unchanged. 

For a general quantum measurement described by a collection M = M 0j ..2" of 
measurement operators, which satisfy the completeness equation J^m : 0, ..2™ • 
M^Mm = I, the specification is measureM^r, where 

measure M ip r = (ip\M^.,M r >ip) x I ip' = ^ r J x (a' = a) 

V V (ml^ip) J 
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where a' = a is an abbreviation of (x' = x) x (y' = y) x . . . and means "all other 
other variables are unchanged" . To obtain the distribution of, say, r' we sum 
out the rest of the variables as follows: 

]T VA x', y',.... (ml'Mr^) xL'= MrnP )x(a' = a) 



(^|M r f ,M r ^) 



For projective measurements defined by an observable O = J2 m ' x Pm, 
where P m is the projector on the eigenspace of O with eigenvalue X m : 

( P'^ \ 

measureo ip r = (ip\P r iip) X I if) = — r x (<j = <r) 

V vwM / 

Given an arbitrary orthonormal basis B ~ &0...2™, measurement of ip in basis B 
is: 

measure^ V-'^ = K^r'lV- 1 )! 2 x W = V) x (°"' = a ) 

Finally, the simplest and the most commonly used measurement in the compu- 
tational basis is: 

measure tpr = \ipr'\ 2 x (ip' = |r')) x (a = a) 

In this case the distribution of r' is \ipr'\ 2 and the distribution of the quantum 
state is: 



]Tr'.hK| 2 x(V/ = |r')) 



which is precisely the mixed quantum state that results from the measurement. 

In order to develop quantum programs we need to add to our list of im- 
plemented things from section 12.21 We add variables of type quantum state as 
above and we allow the following three kinds of operations on these variables. 
If "0 is a state of an rt-qubit quantum system, r is a natural variable, and M is 
a collection of measurement operators that satisfy the completeness equation, 
then: 

1. ip := |0)® n is a program 

2. ip := Utp, where U is a unitary transformation on an n-qubit system, is a 
program 

3. measure m ipr is a program 

The special cases of measurements, described in section 12.11 are therefore also 
allowed: for an observable O, measureo 1 r is a program; for an orthonormal 
basis _B, measure^ qr is a program; finally, measure qr is a program. 
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3.2 Deutsch-Jozsa algorithm 

Deutsch-Jozsa problem (52); an extension of Deutsch's Problem is an 

example of the broad class of quantum algorithms that are based on quantum 
Fourier transform (|22j). The task is: given a function / : 0, ..2 n — * 0, 1 , such 
that / is either constant or balanced, determine which case it is. Without any 
restrictions on the number of calls to /, we can write the specification (let us 
call it S) as follows: 

(/ is constant V / is balanced) b' = f is constant 

where b is a boolean variable and the informally stated properties of / are defined 
formally as follows: 

/ is constant = Vi : 0, ..2™ • fi = fO 
f is balanced = |^ i : 0, ..2" ■ (-l) /l 

It is easy to show that 

(/ is constant V / is balanced) 
=>■ (/ is constant = Vi : 0, ..2™" 1 + 1 • fi = /0) 

In our setting, we need to implement the specification R defined as follows: 

b'= Vi : 0, ..2"- 1 + 1 • fi = fO 

The Hadamard transform, widely used in quantum algorithms, is defined on a 
1-qubit system and in our setting is a higher-order function from 0, 1 — * C to 
0,1 -> C: 

H = Xtp : 0, 1 -> C • i : 0, 1 • (^0 + (-1) 1 x ipl)/V2 

The operation H® n on a n-qubit system applies H to every qubit of the system. 
Its action on a zero state of an n-qubit system is: 

ff®»|0)®" = x : 0, ..2" • |x) /V¥ 
On a general state |x), the action of H® n is: 

ji«>»|x) = Y,y ■■ o. -2" • (-!) x ' y x |y)/V2™ 

where x • y is the bitwise inner product of x and y modulo 2 (bitwise XOR) . 

Another important definition is that of the quantum analog of a classical 
oracle /: 

U f = Xip : 0, 1 -> C • x : 0, 1 • (-l) fx x ipx 
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The quantum solution, in one quantum variable ip and an integer variable r 

is: 

ip := |0)®"; V := H® n ip; V := Ufip; ip := H® n %l)- measure iPr;b:= (r = 0) 

Let us add to the specification a restriction on the number of calls to the oracle 
by introducing a time variable. Suppose the new specification is: 

(/ is constant V / is balanced ==> b' = f is constant) A (t = t + 1) 

where we charge 1 unit of time for each call to the oracle and all other operations 
are free. Clearly, the above quantum solution works. Classically the specification 
is unimplementable. In fact, the strongest classically implementable specification 
is 

(/ is constant V / is balanced ==> b' = f is constant) A (t' = t + 2™ _1 + 1) 
3.3 Grover's search 

Grover's quantum search algorithm f|18p is well-known for the quadratic speed- 
up it offers in the solutions of NP-complctc problems. The algorithm is optimal 
up to a multiplicative constant (JHI)- The task is: given a function / : 0, ..2™ — > 
0, 1, find x : 0, ..2™, such that fx = 1. For simplicity we assume that there is only 
a single solution, which we denote x\, i.e. f x% = 1 and fx = for all x ^ x%. 
The proofs are not very different for a general case of more than one solutions. 
As before, we use a general quantum oracle, defined by 

U,\x) = (-l) fx x |x) 

In addition, we define the inversion about mean operator as follows: 

M : (0, ..N -> C) -> (0, ..N -> C) 

Mip = \x : 0, ..N ■ 2 x (V] i : 0, .JV • ipi/Nj - tpx 

where N = 2". 

Grover's algorithm initialises the quantum system to an equally weighted 
superposition of all basis states |x), x : 0,..N. It then repeatedly applies Uf 
followed by M to the system. Finally, the state is measured. The probability of 
error is determined by the number of iterations performed by the algorithm. 

The algorithm is easily understood with the help of a geometric analysis of 
the operators. Let a be the sum over all x, which are not solutions, and let f3 be 
the solution: 

a = x S x * Xl ' |x) 

/3 = |xi) 
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Then the oracle Uf performs a reflection about the vector a in the plane defined 
by a and f3. In other words, Uf(axa + bx(3) — a x a — b x f3. Similarly, the 
inversion about mean operator is a reflection about the vector ip in the plane 
defined by a and (3. Therefore, the result of Uf followed by M is a rotation in 
this plane. The quantum solution, in a quantum variable ip, natural variables r, 
i, and k, and time variable t, is, 



S = [sin f(2 x (t' - t) + 1) X arcsin y/l/N) J x (r' = xi) + 
(l - (sin ((2 x (t' - t) + 1) x arcsin 07^) ) ^ x 

(rV^iV(iV-l) 
= P; measure ip r 

P i := 0; V := |0)® n ; V — 
i? <^= if i = k then ofc 

else (i ;= i + 1; t := i + 1; i/) := C7/V; V> := -R) 

Specification S carries a lot of useful information. For example, it tells us that 
the probability of finding a solution after k iterations is 

(sin((2 x k + 1) x arcsin \A/AT)) 

Or we might ask how many iterations should be performed to minimise the 
probability of an error. Examining first and second derivatives, we find that the 
above probability is minimised when t' — t = {% x i)/(4 x arcsin y/l/N) — 1/2 for 
integer i. Of course, the number of iterations performed must be a natural num- 
ber. It is interesting to note that probability of error is periodic in the number of 
iterations, but since we don't gain anything by performing extra iterations, we 
pick i = l. Finally, assuming 1 <C N = 2", we obtain an elegant approximation 
to the optimal number of iterations: \n x v2"/4| , with the probability of error 
approximately 1/2". 



3.4 Computing with Mixed States 

As we have discussed in section 12.11 the state of a quantum system after a 
measurement is traditionally described as a mixed state. An equation ip = 
{|0)}/2 + {|l)}/2 should be understood as follows: the state ip is |0) with proba- 
bility 1/2 and it is |1) with probability 1/2. In contrast to a pure state, a mixed 
state does not describe a physical state of the system. Rather, it describes our 
knowledge of in what state the system is. 

In our framework, there is no need for an additional mechanism to compute 
with mixed states. Indeed, a mixed state is not a system state, but a distribution 
over system states, and all our programming notions apply to distributions. 
The above mixed state is the following distribution over a quantum state ip: 
(ip = |0))/2 + (tp = |l))/2. This expression tells us, for each possible value in 
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the domain of ip, the probability of ip having that value. For example, ip is 
the state |0) with probability (|0) = |0))/2 + (|0) = |l»/2, which is 1/2; it is 
|1) with probability (|1) = |0))/2 + = |l))/2, which is also 1/2; for any 
scalars a and 0, not equal to or 1, ip is a x |0) + x |1) with probability 
(a x |0> + x |1) = |0))/2+ (a x |0) + x |1) = |l))/2, which is 0. One way to 
obtain this distribution is to measure an equally weighted superposition of |0) 
and |1>: 

ip' = \0)/V2+ \1)/V2; measure ipr 

measure 

= 1/ = \0)/V2+ |1>/V2; |Vrf x (y/ = |r'» 

sequential composition 
= JV'.V" ■ W = |0>/V2 + |1)/V2) x \ip"r'\ 2 x (y/ = |r'» 

one point law 

= |(|0)/V2+ \1)/V2)r'\ 2 x (y/ = |r')) 
= W - |r'»/2 
Distribution of the quantum state is then: 

J2r' ■ W = |r'))/2 = (V = |0»/2 + (V/ - |l»/2 

as desired. 

Similarly, there is no need to extend the application of unitary operators. 
Consider the following toy program: 

ip := |0); V : = Hip; measure ipr; if r = then ip :— Hip else ok 

In the second application of Hadamard the quantum state is mixed, but this is 
not evident from the syntax of the program. It is only in the analysis of the final 
quantum state that the notion of a mixed state is meaningful. The operator is 
applied to a (pure) system state, though we are unsure what that state is. 

tp := |0); ip := Hip; measure ipr; 

if r = then ip := Hip else ok as before 

= W = |r'»/2; 

if r = then ip := Hip else ok sequential composition 

= ]Tr",y/'. « = |r»))/2 x 

({r" = 0) x (iP' = Hip") x (/ = r") + 
(r" = 1) x (ip' = ip") x (V = r")) one point law 

= ((ip> = H\0)) x (/ = 0) + (ip' = |1)) x (/ = 1)) /2 
= = |0)/V2 + \1)/V2) x (/ = 0)/2 + 
(V/ = |l»x(r' = l)/2 
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The distribution of the quantum state after the computation is: 

]Tr' • OA' = |0)/V2+ |1)/V2) x (r' = 0)/2 + = |1)) x (/ = l)/2 

= (i>' = |0)/V2+ |l)/V2)/2 + (V/ = |l»/2 

A lot of properties of measurements and mixed states can be proven from the 
definitions of measurement and sequential composition. For example, the fact 
that a measurement in the computational basis, performed immediately following 
a measurement in the same basis, does not change the state of the system and 
yields the same result as the first measurement with probability 1, is proven as 
follows: 

measure if> r; measure ip r measure 
= \ipr'\ x (jp' = |r')); IV^'I 2 x (ip' — |r')) sequential composition 

= ^VV" ' \i>r"\ 2 x (ip" = |r")) x \ip"r'\ 2 x (tp' = |r'» one point law 
= |"0?''| 2 x (ij/ — |r')) measure 
= measure ip r 

In case of a general quantum measurement, the proof is similar, but a little more 
computationally involved. 

4 Conclusion and Future Work 

We have presented a new approach to developing, analysing, and proving cor- 
rectness of quantum programs. Since we adopt Hehner's theory as the basis for 
our work, we inherit its advantageous features, such as simplicity, generality, and 
elegance. Our work extends probabilistic predicative programming in the same 
fashion that quantum computation extends probabilistic computation. We have 
provided tools to write quantum as well as classical specifications, develop quan- 
tum and classical solutions for them, and analyse various properties of quantum 
specifications and quantum programs, such as implementability, time and space 
complexity, and probabilistic error analysis uniformly, all in the same framework. 

Current research an research in the immediate future involve reasoning about 
distributed quantum computation. Current work involves expressing quantum 
tclcportation, dense coding, and various games involving entanglement, in a way 
that makes complexity analysis of these quantum algorithms simple and natu- 
ral. These issues will be described in a forthcoming paper. We can easily express 
tclcportation as refinement of a specification </>' = ip, for distinct qubits <p and 
ip, in a well-known fashion. However, we are more interested in the possibilities 
of simple proofs and analysis of programs involving communication, both via 
quantum channels and exhibiting the LOCC (local operations, classical commu- 
nication) paradigm. Future work involves formalising quantum cryptographic 
protocols, such as BB84 [5], in our framework and provide formal analysis of 
these protocols. This will naturally lead to formal analysis of distributed quan- 
tum algorithms (e.g. distributed Shor's algorithm of ) . 
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